Senior Reverse Engineer / Vulnerability Researcher

  • Johns Hopkins Applied Physics Laboratory (APL)
  • Laurel, Maryland
  • 09/12/2026
Full time Information Technology Telecommunications

Job Description

Johns Hopkins Applied Physics Laboratory (APL) seeks a Senior Reverse Engineer / Vulnerability Researcher to analyze complex software, firmware, and embedded systems to uncover critical vulnerabilities supporting national security and space missions. You will deconstruct binaries, perform malware analysis, develop proof-of-concept exploits, and design mitigations. Collaborate with multidisciplinary experts in a mission-driven, research-focused environment that values curiosity, ethics, and impact, with strong support for innovation, publications, and professional growth, including advanced degrees and technical leadership opportunities.

Responsibilities

  • Reverse engineer complex binaries, firmware, and embedded systems to identify vulnerabilities and system behavior.
  • Conduct vulnerability research, exploit development, and proof-of-concept demonstrations for mission-focused projects.
  • Analyze malware and advanced threats, deriving capabilities, indicators, and defensive insights.
  • Develop tools, scripts, and automation to support large-scale analysis and fuzzing efforts.
  • Collaborate with cross-functional teams of scientists and engineers on national security, space, and health missions.
  • Document findings, produce technical reports, and present results to sponsors and internal stakeholders.
  • Contribute to the design of mitigations, secure architectures, and defensive techniques informed by research.
  • Mentor junior staff and contribute to APL's research community through publications and prototypes.

Required Skills

  • Reverse engineering (IDA Pro, Ghidra, Binary Ninja)
  • Vulnerability research and exploitation
  • C/C++ programming
  • Python scripting
  • Assembly language (x86/x64/ARM)
  • Operating system internals (Windows/Linux)
  • Network protocols and security
  • Malware analysis
  • Fuzzing tools and techniques
  • Secure coding and mitigation techniques